Abstract: Buffer overflow attack is one of the most threatening attack types and it jeopardizes information security a lot. According to the principle of the attack, this paper generalizes three necessary steps of a buffer overflow attack. It divides the most popular technologies of buffer overflow attack detection into three types in light of detecting the three attack steps, and also analyzes and studies those technologies.

Key words: buffer overflow, ShellCode, attack detection

摘要：

缓冲区溢出攻击是目前最具威胁的攻击方式之一，对信息安全造成了极大的危害。该文通过分析缓冲区溢出攻击的原理，归纳出攻击所必需的3个步骤，根据检测这3个攻击步骤，将当前最常用的缓冲区溢出攻击检测技术分为3种类型，并对其进行了分析和研究。

关键词: 缓冲区溢出, ShellCode, 攻击检测

CLC Number: 

• TP309.2